Skip to content
CVE Tracker
Back

CVE-2005-2963

The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that…

High7.5EPSS 2.4%
Published
Updated
Reserved
Assigned by
debian

Description

The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.

Scores

CVSS scores of CVE-2005-2963, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0High7.5AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (exploitation in 30 days)
2.4% · top 16% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

  • n/a

Affected products

  • n/a

    • affected n/a

References (9)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .